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DRAWINGS 

1 . This application has been filed with drawings that are considered informal; said drawings 
are acceptable for examination purposes. The review process for drawings that are included with 
applications on filing has been modified in view of the new requirement to publish applications at 
eighteen months after the filing date of applications, or any priority date claimed under 35 U.S.C. 
§§119, 120, 121, or 365. 

CLAIM AMENDMENT OBJECTION — 37 CFR §1.121 

2. The amendments to the claims filed on 5/8/2001 and 4/24/2002 do not comply with 
the requirements of 37 CFR 1.121( c )(l)(ii) because there is no marked up version of the 
amended claims. Appropriate corrections are required. 

CLAIM REJECTIONS — 35 U.S.C. §103(a) 

The following is a quotation of 35 U.S.C. § 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the 
invention is not identically disclosed or described as set - 
forth in section 102 of this title, if the differences between 
the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been 
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obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter 
pertains. Patentability shall not be negatived by the manner 
in which the invention was made. 

3. Independent claims 25 & 36 and dependent claims 26, 27, 30, 31, 34, 35, 38, 40, 42, 44, 
46, 48, 50, 52, 54, 56 & 58 are rejected under 35 U.S.C. §103(a) as being unpatentable over 
Rosen 5,557,518 (09/17/96) [M: 4/28/94] (herein referred to as " Rosen "). 

As per claim 25, Rosen (col. 23, 11. 9-51) shows elements that suggest a "method 
of issuing an electronic negotiable document. . . [i.e., "electronic money"]. 

Rosen (col. 16, 11. 19-20) shows elements that suggest "a unique public-secret key 
pair for signing and verifying. . . ." 

Rosen (col. 4, 11. 4-37; col. 4 11. 40-67; col. 5, 11. 1-23; col. 5, 11. 38-61; col. 6, 11. 3- 
13; and FIG. 1 and FIG. 2) shows elements that suggest "creating as data an END and 
storing this in a tamper-resistant document carrier, the document carrier containing a . . . 
verifying and a unique document carrier identifier . . . and storing the result in the 
document carrier." 

Rosen does not explicitly show "signing the unique document-carrier 
identifier. ..." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen (col! 6, 11. 9-12) "[digital] signatures are well known in the art and are used 
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to detect if a signed electronic object has been altered in anyway since the time it was 
signed. . . . " would have been selected in accordance with "signing the unique 
document-carrier identifier. . . ." because such signing would have provided an "electronic 
object integrity . . . check. . . . " (See Rosen col. 6, 11. 11-12). 

As per claim 26, Rosen shows the method according to claim 25 above. 

Rosen (FIG. 2, els. 42, 56, 68, 82, 92, 98, 106, 1 12, and 1 16) shows elements 
that suggest "generating a time stamp representing the time of issue. ..." 

Rosen does not explicitly show "storing this . . . [time stamp] with the END in 
the tamper-resistant document carrier before the encryption step. " 

Rosen (col. 6, 11. 37-43) shows "Time Purchased field . . . a Decryption Keys 
field . . .for decrypting if the communication is encrypted. . . . " 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen "Time Purchased field . . . a Decryption Keys field . . . for decrypting if the 
communication is encrypted. . . . " would have been selected in accordance with "storing 
this . . . [time stamp] with the END in the tamper-resistant document carrier before the 
encryption step. ..." because such time stamp storing would have provided an "electronic 
object integrity . . . check. ..." (See Rosen col. 6, 11. 11-12). 

As per claim 27, Rosen shows the method according to claim 25 above. 

Rosen (col. 12, 11. 6-8) shows elements that suggest "calculating a hash value of 
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the end and/or the time stamp value and storing this hash value instead of the full end in 
the tamper-resistant document carrier. . . 

Rosen does not explicitly show "storing this . . . [hash function] . . . before the 
encryption step. " 

Rosen (col. 6, 11. 37-43) shows "a Decryption Keys field . . .for decrypting if 
the communication is encrypted. ..." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen 's "Decryption Keys field. . . for decrypting if the communication is 
encrypted. . . . " would have been selected in accordance with "storing this . . . [hash 
function] . . . before the encryption step. . . ." because such hash function storing would 
have provided an "electronic object integrity . . . check. ..." (See Rosen col. 6, 11. 11- 



As per claim 30, Rosen shows the method according to claim 25 above. 
Rosen (col. 1 1, 11. 62-67; and col. 12, 11. 6-15) shows elements that suggest 
'calculating a hash value of the data to be encrypted by said secret key, in place of the full 



Rosen does not explicitly show "calculating a hash value of the data to be 
encrypted by said secret key, in place of the full data." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's "certificate validation protocols . . . [which include] hash . . . and 



12). 



data. 
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encrypting . . . applications. . . . " would have been selected in accordance with 
"calculating a hash value of the data to be encrypted by said secret key, in place of the full 
data. . . ." because such applications would have provided an "electronic object integrity . 
. . check. . . . " (See Rosen col. 6, 11. 11-12). 

As per claim 31, Rosen shows the method according to claim 25 above. 

Rosen (col. 6, 11. 26-32; FIG. 2, els. 58, 84 and 100) shows elements that suggest 
"the document carrier stores a negotiability status flag indicative of whether the END 
stored therein in negotiable or non-negotiable, and including the step of setting the flag to 
'negotiable' after the result of the encryption has been stored in the document carrier." 

Rosen does not explicitly show "the document carrier stores a negotiability 
status flag indicative of whether the END stored therein in negotiable or non-negotiable, 
and including the step of setting the flag to 'negotiable' after the result of the encryption 
has been stored in the document carrier." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's "a Status field . . . indicating whether the ticket is unused or has already 
been used. . . . " would have been selected in accordance with "the document carrier stores 
a negotiability status flag indicative of whether the END stored therein in negotiable or 
non-negotiable, and including the step of setting the flag to 'negotiable' after the result of 
the encryption has been stored in the document carrier. . . ." because such status indication 
would have provided an "electronic object integrity . . . check. ..." (See Rosen col. 6, 11. 



• 
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11-12). 



Dependent claim 33 is rejected for substantially the same reasons as claim 25. 
Dependent claim 34 is rejected for substantially the same reasons as claim 31. 
Dependent claim 35 is rejected for substantially the same reasons as claim 32. 

As per claim 36, Rosen (col. 23, 11. 9-51; and FIG. 1) shows elements that suggest 
a "method of negotiating an END [i.e., "electronic money"] between seller and a buyer 
each possessing a tamper-resistant document carrier. . . ." 

Rosen (col. 16, 11. 19-20; col. 4, 11. 4-37; col. 4 11. 40-67; col. 5, 11. 1-23; col, 5, 11. 
38-61; col. 6, 11. 3-13; FIG. 1 and FIG. 2) shows elements that suggest a "carrier having 
its own public-secret key pair, in which the END is stored in the seller's document carrier 
in the form of END data. . . . sending the public encryption key of the buyer's document 
carrier to the seller's document carrier. . , . using . . . [the public encryption key] to 
encrypt the message comprising the END together with the negotiability status flag. . . ." 

Rosen (FIG. 7B; col. 2, 11. 61-62; col. 2, line 66; col. 3, 11. 59-60; col. 13, 11. 35-36; 
col. 14, 11. 12-35; col. 14, 11. 47-65; col. 15, 11. 3-12; col. 19, 11. 11-40; col. 21, 11. 36-65; 
col. 22, 11. 5-19; col. 24, 11. 21-60; col. 25, 11. 9-34; col. 27, 11. 15-20; col. 27, 11. 53-61; col. 
28, 11. 30-36; col. 29, 11. 52-65; col. 38, 11. 48-67; col. 39, 11. 16-35; col. 39, 11.43-45; and 
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col. 40, 11. 14-29) shows elements that suggest "establishing mutual recognition between 
the seller and buyer using a predetermined protocol between the respective document 
carriers . . . [and] aborting the negotiation if not. . . 

Rosen (FIG. 1 and FIG. 2) shows elements that suggest "sending the public 
encryption key of the buyer's document carrier to the seller's document carrier, and using 
it to encrypt the message comprising the END together with the negotiability status flag, 
sending that encrypted message to the buyer, decrypting the message using the buyer's 
secret decryption key, and setting the negotiability status flag for the END of the buyer's 
and seller's document carriers respectively to 'negotiable and non-negotiable 5 ". 

Rosen (col. 6, 11. 26-32; FIG. 2, els. 58, 84 and 100) shows elements that suggest 
"a negotiability status flag indicative of whether the END is currently negotiable from the 
document carrier on which it is stored. . . . [and] verifying in the seller's document carrier 
that the negotiability status flag is negotiable" 

Rosen does not explicitly show "the signature generated by the secret signing- 
key of a document carrier of the issuer of the END. . . ." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen (col. 6, 11. 9-12) "[digital] signatures are well known in the art and are used 
to detect if a signed electronic object has been altered in anyway since the time it was 
signed, . . . " would have been selected in accordance with "the signature generated by the 
secret signing-key of a document carrier of the issuer of the END. . . ." because such 
signing would have provided an "electronic object integrity . . . check . . . " (See Rosen 
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col. 6, 11. 11-12). 



As per claim 38, Rosen shows the method according to claim 36. 

Rosen (col. 15, 11. 15-67; col. 16, 11. 19-67; col 17, 11. 1-40; and col. 18, 11. 17-35) 
shows elements that suggest "each document carrier is installed originally with a certificate 
comprising a digital signature of its unique identifier and of its public key." 

Rosen does not explicitly show "each document carrier is installed originally with a 
certificate comprising a digital signature of its unique identifier and of its public key." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 18,11. 17-35) "[validate] issuer certificate and check issuer 
signature. . . . Verify . . . identifiers. . . . Validate each sender certificate and check each 
sender signature. Verify . . . receiver identifier. . . . " would have been selected in 
accordance with "each document carrier is installed originally with a certificate comprising 
a digital signature of its unique identifier and of its public key. . . ." because such 
credentials would have provided an "electronic object integrity . . . check. . . . " (See 
Rosen col. 6, 11. 11-12). 

As per claim 40, Rosen shows the method according to claim 38. 

Rosen (FIG. 2 and col. 16, 11. 27-37) shows elements that suggest "the certificate 
unique to the document carrier on which the END was originally issued is stored with the 
END in the seller's document carrier." 




Serial Number: 09/747,511 



(Landrock) 



Art Unit: 3622 



Rosen does not explicitly show "the certificate unique to the document carrier on 
which the END was originally issued is stored with the END in the seller's document 
carrier." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 16, 11. 27-37) "both . . . have stored the . . . session key . . . to be used 
for their current interaction in recertifying. . . . " would have been selected in accordance 
with "the certificate unique to the document carrier on which the END was originally 
issued is stored with the END in the seller's document carrier. . . because such 
certification would have provided an "electronic object integrity . . . check. ..." (See 
Rosen col. 6, 11. 11-12). 

As per claim 42, Rosen shows the method according to claim 38. 

Rosen (FIG. 2; FIG. 1; and col. 16, 11. 27-37) shows elements that suggest "the 
certificate of the buyer's document carrier is sent to the seller's document carrier. . . ." 

Rosen (FIG. 7B; col. 2, 11. 61-62; col. 2, line 66; col. 3, 11. 59-60; col. 13, 11. 35-36; 
col. 14, 11. 12-35; col. 14, 11. 47-65; col. 15, 11. 3-12; col. 19, 11. 11-40; col. 21, 11. 36-65; 
col. 22, 11. 5-19; col. 24, 11. 21-60; col. 25, 11. 9-34; col. 27, 11. 15-20; col. 27, 11. 53-61; col. 
28, 11. 30-36; col. 29, 11. 52-65; col. 38, 11. 48-67; col. 39, 11. 16-35; col. 39, 11.43-45; col. 
40, 11. 14-29; and col. 18, 11. 17-37) shows elements that suggest "the certificate of the 
buyer's document carrier ... is authenticated and the negotiation is aborted if 
authentication fails." 
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Rosen does not explicitly show "the negotiation is aborted if authentication fails." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 18, 11. 17-37) "[if] the . . . credential is not valid, then the transaction 
is aborted. ..." would have been selected in accordance with "the negotiation is aborted 
if authentication fails. . . ." because such validation would have provided an "electronic 
object integrity , . . check ..." (See Rosen col. 6, 11. 11-12). 

As per claim 44, Rosen shows the method according to claim 36. 

Rosen (col. 16, 11. 19-20) shows elements that suggest a"secret key, verifies the 
signature of the issuer on the END. . . 

Rosen (FIG. 1; FIG. 2; FIG. 7B; col. 2, 11. 61-62; col. 2, line 66; col. 3, 11. 59-60; 
col. 13, 11. 35-36; col. 14, 11. 12-35; col. 14, 11. 47-65; col. 15, 11. 3-12; col. 19, 11. 11-40; 
col. 21, 11. 36-65; col. 22, 11. 5-19; col. 24, 11. 21-60; col. 25, 11. 9-34; col. 27, 11. 15-20; col. 
27, 11. 53-61; col. 28, 11. 30-36; col. 29, 11. 52-65; col. 38, 11. 48-67; col. 39, 11. 16-35; col. 
39, 11.43-45; col. 40, 11. 14-29; and col. 18, 11. 17-37) shows elements that suggest "the 
buyer's document carrier after decrypting the message using its secret key, verifies the 
signature of the issuer on the END, and informs the issuer in the event that authentication 



Rosen does not explicitly show "after decrypting the message using its secret key, 
verifies the signature of the issuer on the END. . . 



fails. 
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It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 18, 11. 17-35) "[validate] issuer certificate and check issuer signature. . 
. . Verify . . . identifiers. . . . Validate each sender certificate and check each sender 
signature. Verify . . . receiver identifier. . . . " would have been selected in accordance 
with "after decrypting the message using its secret key, verifies the signature of the issuer 

on the END " because such verification would have provided an "electronic 

object integrity . . . check. . . . " (See Rosen col. 6, 11. 1 1-12). 

As per claim 46, Rosen shows the method according to claim 25. 

Rosen (FIG. 1 and FIG. 2) shows elements that suggest "issuing an END on a 
document-carrier. . . . [preceding] a method of negotiating an END. . . 

Rosen (col. 23, 11. 9-51; and FIG. 1) shows elements that suggest a "method of 
negotiating an END [i.e., "electronic money"] between seller and a buyer each possessing 
a tamper-resistant document carrier. . . 

Rosen (col. 16, 11. 19-20; col. 4, 11. 4-37; col. 4 11. 40-67; col. 5, 11. 1-23; col. 5, 11. 
38-61; col. 6, 11. 3-13; FIG. 1 and FIG. 2) shows elements that suggest a "carrier having 
its own public-secret key pair, in which the END is stored in the seller's document carrier 
in the form of END data. . . . sending the public encryption key of the buyer's document 
carrier to the seller's document carrier. . . . using . . . [the public encryption key] to 
encrypt the message comprising the END together with the negotiability status flag. . . ." 
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Rosen (FIG. 7B; col. 2, 11. 61-62; col. 2, line 66; col. 3, 11. 59-60; col. 13, 11. 35-36; 
col. 14, 11. 12-35; col. 14, 11. 47-65; col. 15, 11. 3-12; col. 19, 11. 11-40; col. 21, 11. 36-65; 
col. 22, 11 5-19; col. 24, 11. 21-60; col. 25, 11. 9-34; col. 27, 11. 15-20; col. 27, 11. 53-61; col. 
28, 11. 30-36; col. 29, 11. 52-65; col. 38, 11. 48-67; col. 39, 11 16-35; col. 39, 11.43-45; and 
col. 40, 11. 14-29) shows elements that suggest "establishing mutual recognition between 
the seller and buyer using a predetermined protocol between the respective document 
carriers . . . [and] aborting the negotiation if not. . . ." 

Rosen (FIG. 1 and FIG. 2) shows elements that suggest "sending the public 
encryption key of the buyer's document carrier to the seller's document carrier, and using 
it to encrypt the message comprising the END together with the negotiability status flag, 
sending that encrypted message to the buyer, decrypting the message using the buyer's 
secret decryption key, and setting the negotiability status flag for the END of the buyer's 
and seller's document carriers respectively to 'negotiable and non-negotiable'". 

Rosen (col. 6, 11. 26-32; FIG. 2, els. 58, 84 and 100) shows elements that suggest 
"a negotiability status flag indicative of whether the END is currently negotiable from the 
document carrier on which it is stored. . . . [and] verifying in the seller's document carrier 
that the negotiability status flag is negotiable" 

Rosen does not explicitly show "the signature generated by the secret signing- 
key of a document carrier of the issuer of the END. . . ." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 6, 11. 9-12) "[digital] signatures are well known in the art and are used 
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to detect if a signed electronic object has been altered in anyway since the time it was 
signed. ..." would have been selected in accordance with "the signature generated by the 
secret signing-key of a document carrier of the issuer of the END. . because such 
signing would have provided an "electronic object integrity . . . check ..." (See Rosen 
col. 6, 11. 11-12). 

Dependent claim 48 is rejected for substantially the same reasons as claim 36. 

As per claim 50, Rosen shows the method according to claim 48. 
Rosen (FIG. 1 and FIG. 2) shows elements that suggest "the buyer's document 
carrier. . . ." 

Rosen (col. 16, 11. 19-20) shows elements that suggest a "secret key, verifies that 
the END is still valid " 

Rosen (col. 6, 11. 37-43) shows elements that suggest "after decrypting the 
message with its secret key . . . taking its time stamp. . . ." 

Rosen (col. 6, 11. 26-32; FIG. 2, els. 58, 84 and 100; and FIG. 7B; col. 2, 11. 61-62; 
col. 2, line 66; col. 3, 11. 59-60; col. 13, 11. 35-36; col. 14, 11. 12-35; col. 14, 11. 47-65; col. 
15, 11. 3-12; col. 19, 11. 11-40; col. 21, 11. 36-65; col. 22, 11. 5-19; col. 24, 11. 21-60; col. 25, 
11. 9-34; col. 27, 11. 15-20; col. 27, 11. 53-61; col. 28, 11. 30-36; col. 29, 11. 52-65; col. 38, 11. 



48-67; col. 39, 11. 16-35; col. 39, 11.43-45; and col. 40, 11. 14-29) shows elements that 
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suggest "if . . . [the time stamp] has expired, informs the issuer of this, and aborts the 
negotiation before incrementing the counter or setting the negotiation status flag." 

Rosen does not explicitly show "if . . . [the time stamp] has expired, informs the 
issuer of this. . . ."; however, it would have been obvious to one of ordinary skill in the art 
of secure transactions that Rosen's (col. 6, 11. 9-12) "[digital] signatures are well known 
in the art and are used to detect if a signed electronic object has been altered in anyway 
since the time it was signed. . . . " would have been selected in accordance with "if . . . 
[the time stamp] has expired, informs the issuer of this, and aborts the negotiation before 
incrementing the counter or setting the negotiation status flag. . ." because such time 
stamp validation would have provided an "electronic object integrity . . . check. 
(See Rosen col. 6, 11. 11-12). 

As per claim 52, Rosen shows the method according to claim 36. 

Rosen (FIG. 2; FIGs. 30A-E; col. 15, 11. 15-65; col. 16, 11. 1-67; col. 7, 11. 29-41; 
and col. 41, 11. 37-39) shows elements that suggest "recovering the negotiation of an END 
which has previously broken down, by providing the buyer's document-carrier with the 
necessary secret key which has been reproduced by the issuer or by a trusted third party." 

Rosen does not explicitly show "recovering the negotiation of an END. . . ."; 
however, it would have been obvious to one of ordinary skill in the art of secure 
transactions that Rosen (FIG. 2; FIGs. 30A-E; col. 15, 11. 15-65; and col. 16, 11. 1-67) 
"recertifying A s certificate. ..." would have been selected in accordance with 
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"recovering the negotiation of an END " because such recertifying validation would 

have provided an "electronic object integrity . . . check. ..." (See Rosen col. 6, 11. 11- 
12). 

As per claim 54, Rosen shows the method according to claim 36. 

Rosen (col. 41, 11. 37-39) shows elements that suggest "an END lost from a 
primary document-carrier. ..." 

Rosen (col. 13, 11. 5-15; col. 13, 11. 35-60; and col. 20, 11. 31-42) shows elements 
that suggest "recovering an END lost from a primary document-carrier, by activating a 
back-up document-carrier which has previously been provided with back-up data 
reproduced from the primary document-carrier." 

Rosen does not explicitly show a "back-up document-carrier which has previously 
been provided with back-up data reproduced from the primary document-carrier." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 20, 11. 38-42) "[the] overall system security pertaining to the money 
modules may be integrated with that for the trusted agents . . . but is preferably separate 
to provide for enhanced system security and system flexibility. . . . " would have been 
selected in accordance with a "back-up document-carrier which has previously been 
provided with back-up data reproduced from the primary document-carrier. . . ." because 
such back-up capability would have provided an "electronic object integrity . . . 
check. . . . " (See Rosen col. 6, 11. 11-12). 
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As per claim 56, Rosen shows the method according to claim 52. 

Rosen (col. 15, 11. 3-37) shows elements that suggest "inhibiting the recovery until 
the expiry of the predetermined period of validity of the END." 

Rosen does not explicitly show "expiry of the predetermined period of validity of 
the END." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen 's (col. 15, 11. 3-11) "[if] the timer expires before the message has been 
received, then Session Manager A will query Session Manager B to determine if the 
transaction is still running in B. IfB does not reply, then Session Manager will abort 
the transaction. . . . A similar time-out function exists in the money modules. . . . " would 
have been selected in accordance with "expiry of the predetermined period of validity of 
the END. . . ." because such a validity transaction would have provided an "electronic 
object integrity . . . check. ..." (See Rosen col. 6, 11. 11-12). 

As per claim 58, Rosen shows the method according to claim 54. 

Rosen (col. 15, 11. 3-37) shows elements that suggest "inhibiting the recovery until 
the expiry of the predetermined period of validity of the END." 

Rosen does not explicitly show "expiry of the predetermined period of validity of 
the END." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 15, 11. 3-11) "[iff the timer expires before the message has been 
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received, then Session Manager A will query Session Manager B to determine if the 
transaction is still running in B. IfB does not reply, then Session Manager will abort 
the transaction. . . . A similar time-out function exists in the money modules. ..." would 
have been selected in accordance with "expiry of the predetermined period of validity of 
the END. . . because such a validity transaction would have provided an "electronic 
object integrity . . . check. . . . " (See Rosen col. 6, 11. 11-12). 

4. Dependent claim 28 is rejected under 35 U.S.C. §103(a) as being unpatentable over Rosen 
5,557,518 (09/17/96) [f/d: 4/28/94] (herein referred to as " Rosen ") in view of Pitroda 5,590,038 
(12/31/96) [M: 6/20/94] (herein referred to as "Pitroda"). 

As per claim 28, Rosen shows the method according to claim 25 above. 
Rosen does not explicitly show "the document carrier identifier is a device 
number, and the END identifier is a serial number." 

Pitroda (col. 15, 11. 58-63; and col. 16, 11. 39-40) shows elements that suggest "the 
document carrier identifier is a device number, and the END identifier is a serial number." 

Pitroda proposes serial number and device number modifications that would have 
applied to the electronic ticket process and system of Rosen . It would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to add the 
modifications taught by Pitroda to Rosen , because such modifications would have 
provided a means of "storing . . . various [types] of . . . numbers . . . [associated with] 
financial or personal transactional information. " (See Pitroda col. 2, 11. 55-61). 
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5. Dependent claim 29 is rejected under 35 U.S.C. § 103(a) as being unpatentable over Rosen 
in view Jel 5,354,097 (10/1 1/94) (herein referred to as "Tel"). 

As per claim 29, Rosen shows the method according to claim 25 above. (See the 
rejection of claim 25 supra ). 

Rosen does not explicitly show "the END identifier is supplemented with data 
representing a water mark unique to the issuer." 

Tel (col. 1, 11. 22-26) discloses means to "counteract forgery by providing a 
watermark 

Tel proposes "watermark" modifications that would have applied to the systems 
and methods for secure transaction management of Rosen . It would have been obvious at 
the time the invention was made to a person having ordinary skill in the art to add the 
modifications taught by Tel to Rosen , because implementation of such modifications 
would have provided a means of showing the authenticity of an original image. 

6. Dependent claim 32 and independent claims 37, 39, 41, 43, 45, 47, 49, 51, 53, 55, 57 & 
59 are rejected under 35 U.S.C. § 103(a) as being unpatentable over Rosen in view of Pitroda and 
further in view of Abraham 5,148,481 (09/15/92) (herein referred to as "Abraham"). 

As per claim 32, Rosen shows the method according to claim 25 above. 
Rosen (col. 6, 11. 26-32; FIG. 2, els. 58, 84 and 100; FIG. 4A) shows elements that 
suggest "the times the END has been negotiated since issue. . . ." 
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Rosen does not explicitly show "the document carrier includes a counter for 
counting a serial number . . . setting the counter to zero after the result of the encryption 
has been stored in the document carrier." 

Pitroda (col. 15, 11. 58-63; and col. 16, 11. 39-40) shows elements that suggest "the 
document carrier identifier is a device number, and the END identifier is a serial number." 

Pitroda proposes serial number modifications that would have applied to the 
electronic ticket process and system of Rosen . It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to add the modifications 
taught by Pitroda to Rosen , because such modifications would have provided a means of 
' "storing . . . various [types] of . . . numbers . . . [associated with] financial or personal 
transactional information. " (See Pitroda col. 2, 11. 55-61). 

Abraham (col 5, 11. 5-55; and FIG. 8) shows elements that suggest "the document 
carrier includes a counter for counting a serial number . . . setting the counter to zero 
after the result of the encryption has been stored in the document carrier." 

Abraham proposes counter modifications that would have applied to the electronic 
ticket process and system of Rosen . It would have been obvious at the time the invention 
was made to a person having ordinary skill in the art to add the modifications taught by 
Abraham to Rosen , because implementation of such modifications would have provided a 
method of "access control . . . individually programmable by the application 
owner. . . . " of a digital work. (See Abraham col. 1, 11. 60-65; and col. 2, 11. 1-5). 
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As per claim 37, Rosen (col. 23, 11. 9-51; and FIG. 1) shows elements that suggest 
a "method of negotiating an END [i.e., "electronic money"] between seller and a buyer 
each possessing a tamper-resistant document carrier. . . 

Rosen (col. 16, 11. 19-20; col. 4, 11. 4-37; col. 4 11. 40-67; col. 5, 11. 1-23; col. 5, 11. 
38-61; col. 6, 11. 3-13; FIG. 1 and FIG. 2) shows elements that suggest a "carrier having 
its own public-secret key pair, in which the END is stored in the seller's document carrier 
in the form of END data. . . . sending the public encryption key of the buyer's document 
carrier to the seller's document carrier " 

Rosen does not explicitly show "the signature generated by the secret signing- 
key of a document carrier of the issuer of the END. . . 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 6, 11. 9-12) "[digital] signatures are well known in the art and are used 
to detect if a signed electronic object has been altered in anyway since the time it was 
signed. ..." would have been selected in accordance with "the signature generated by the 
secret signing-key of a document carrier of the issuer of the END. . ." because such 
signing would have provided an "electronic object integrity . . . check . . . " (See Rosen 
col. 6, 11. 11-12). 

Rosen does not explicitly show "the END is stored . . . together with a serial 
number counter indicative of the number of times that the END has been negotiated. . . 
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Pitroda (col. 15, 11. 58-63; and col. 16, 11. 39-40) shows elements that suggest "the 
END is stored . . . together with a serial number counter indicative of the number of times 
that the END has been negotiated. . . 

Pitroda proposes serial number modifications that would have applied to the 
electronic ticket process and system of Rosen . It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to add the modifications 
taught by Pitroda to Rosen , because such modifications would have provided a means of 
"storing . . . various [types] of . . . numbers . . . [associated with] financial or personal 
transactional information, " (See Pitroda col. 2, 11. 55-61). 

Rosen (FIG. 7B; col. 2, 11. 61-62; col. 2, line 66; col. 3, 11. 59-60; col. 13, 11. 35-36; 
col. 14, 11. 12-35; col. 14, 11. 47-65; col. 15, 11. 3-12; col. 19, 11. 11-40; col. 21, 11. 36-65; 
col. 22, 11. 5-19; col. 24, 11. 21-60; col. 25, 11. 9-34; col. 27, 11. 15-20; col. 27, 11. 53-61; col. 
28, 11. 30-36; col. 29, 11. 52-65; col. 38, 11. 48-67; col. 39, 11. 16-35; col. 39, 11.43-45; and 
col. 40, 11. 14-29) shows elements that suggest "establishing mutual recognition between 
the seller and buyer using a predetermined protocol between the respective document 
carriers . . . [and] aborting the negotiation if it is not negotiable. . . ." 

Rosen (col. 6, 11. 26-32; FIG. 2, els. 58, 84 and 100) shows elements that suggest 
"verifying in the seller's document carrier that the END, if it has been stored previously in 
that document carrier, has a different counter value this time and is therefore 
negotiable " 
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Rosen (FIG. 1 and FIG. 2) shows elements that suggest "sending the public 
encryption key of the buyer's document carrier to the seller's document carrier, and using 
it to encrypt the message comprising the END together with the counter, sending that 
encrypted message to the buyer. . . ." 

Rosen does not explicitly show " using . . . [the public encryption key] to 
encrypt the message comprising the END together with the counter, sending the encrypted 
message to the buyer . . . and incrementing the counter by one." 

Abraham (col. 5, 11. 5-55; and FIG. 8) shows elements that suggest encrypting a 
"message comprising the END together with the counter, sending the encrypted message 
to the buyer . . ; and incrementing the counter by one." 

Abraham proposes counter modifications that would have applied to the electronic 
ticket process and system of Rosen . It would have been obvious at the time the invention 
was made to a person having ordinary skill in the art to add the modifications taught by 
Abraham to Rosen , because implementation of such modifications would have provided a 
method of "access control . . . individually programmable by the application 
owner. ..." of a digital work. (See Abraham col. 1, 11. 60-65; and col. 2, 11. 1-5). 

As per claim 39, Rosen in view of Pitroda and Abraham shows the method 
according to claim 37. 
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Rosen (col. 15 5 11. 15-67; col. 16, 11. 19-67; col. 17, 11. 1-40; and col. 18, 11. 17-35) 
shows elements that suggest "each document carrier is installed originally with a certificate 
comprising a digital signature of its unique identifier and of its public key." 

Rosen does not explicitly show "each document carrier is installed originally with a 
certificate comprising a digital signature of its unique identifier and of its public key." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen 's (col. 18, 11. 17-35) "[validate] issuer certificate and check issuer signature. . 
. . Verify . . . identifiers, . . . Validate each sender certificate and check each sender 
signature. Verify . . . receiver identifier. ..." would have been selected in accordance 
with "each document carrier is installed originally with a certificate comprising a digital 
signature of its unique identifier and of its public key. . ." because such credentials would 
have provided an "electronic object integrity . . . check. . . . " (See Rosen col. 6, 11. 11- 
12). 

As per claim 41, Rosen in view of Pitroda and Abraham shows the method 
according to claim 39. 

Rosen (FIG. 2 and col. 16, 11. 27-37) shows elements that suggest "the certificate 
unique to the document carrier on which the END was originally issued is stored with the 
END in the seller's document carrier." 

Rosen does not explicitly show "the certificate unique to the document carrier on 
which the END was originally issued is stored with the END in the seller's document 
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carrier." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen 's (col. 16, 11. 27-37) "both . . . have stored the . . . session key . . . to be used 
for their current interaction in recertifying. ..." would have been selected in accordance 
with "the certificate unique to the document carrier on which the END was originally 
issued is stored with the END in the seller's document carrier. . . ." because such 
certification would have provided an "electronic object integrity . . . check. ..." (See 
Rosen col. 6, 11. 11-12). 

As per claim 43, Rosen in view of Pitroda and Abraham shows the method 
according to claim 39. 

Rosen (FIG. 2; FIG. 1; and col. 16, 11. 27-37) shows elements that suggest "the 
certificate of the buyer's document carrier is sent to the seller's document carrier. . . ." 

Rosen (FIG. 7B; col. 2, 11. 61-62; col. 2, line 66; col. 3, 11. 59-60; col. 13, 11. 35-36; 
col. 14, 11. 12-35; col. 14, 11. 47-65; col. 15, 11. 3-12; col. 19, 11. 11-40; col. 21, 11. 36-65; 
col. 22, 11. 5-19; col. 24, 11. 21-60; col. 25, 11. 9-34; col. 27, 11. 15-20; col. 27, 11. 53-61; col. 
28, 11. 30-36; col. 29, 11. 52-65; col. 38, 11. 48-67; col. 39, 11. 16-35; col. 39, 11.43-45; col. 
40, 11. 14-29; and col. 18, 11. 17-37) shows elements that suggest "the certificate of the 

buyer's document carrier ... is authenticated and the negotiation is aborted if 
authentication fails." 
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Rosen does not explicitly show "the negotiation is aborted if authentication fails." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen 's (col. 18, 11. 17-37) "[if] the . . . credential is not valid, then the transaction 
is aborted. . . . " would have been selected in accordance with "the negotiation is aborted 
if authentication fails. . . ." because such validation would have provided an "electronic 
object integrity . . . check. . . . " (See Rosen col. 6, 11. 11-12). 

As per claim 45, Rosen in view of Pitroda and Abraham shows the method 
according to claim 37. 

Rosen (col. 16, 11. 19-20) shows elements that suggest a "secret key, verifies the 
signature of the issuer on the END. . . ." 

Rosen (FIG. 1; FIG. 2; FIG. 7B; col. 2, 11. 61-62; col. 2, line 66; col. 3, 11. 59-60; 
col. 13, 11. 35-36; col. 14, 11. 12-35; col. 14, 11. 47-65; col 15, 11. 3-12; col. 19, 11. 11-40; 
col. 21, 11. 36-65; col. 22, 11. 5-19; col. 24, 11. 21-60; col. 25, 11. 9-34; col. 27, 11. 15-20; col. 
27, 11. 53-61; col. 28, 11. 30-36; col. 29, 11. 52-65; col. 38, 11. 48-67; col. 39, 11. 16-35; col 
39, 11.43-45; col. 40, 11. 14-29; and col. 18, 11. 17-37) shows elements that suggest "the 
buyer's document carrier after decrypting the message using its secret key, verifies the 
signature of the issuer on the END, and informs the issuer in the event that authentication 
fails." 

Rosen does not explicitly show "after decrypting the message using its secret key, 
verifies the signature of the issuer on the END. . . ." 
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It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 18, 11. 17-35) "[validate] issuer certificate and check issuer signature. . 
. . Verify . . . identifiers. . . . Validate each sender certificate and check each sender 
signature. Verify . . . receiver identifier. . . . " would have been selected in accordance 
with "after decrypting the message using its secret key, verifies the signature of the issuer 

on the END " because such verification would have provided an "electronic 

object integrity . . . check. ..." (See Rosen col. 6, 11. 11-12). 

As per claim 47, Rosen shows the method according to claim 25. 

Rosen (FIG. 1 and FIG. 2) shows elements that suggest "issuing an END on a 
document-carrier. . . . [preceding] a method of negotiating an END. . . " 

Rosen (col. 23, 11. 9-51; and FIG. 1) shows elements that suggest a "method of 
negotiating an END [i.e., "electronic money"] between seller and a buyer each possessing 
a tamper-resistant document carrier. . . 

Rosen (col. 16, 11. 19-20; col. 4, 11. 4-37; col. 4 11. 40-67; col. 5, 11. 1-23; col. 5, 11. 
38-61; col. 6, 11. 3-13; FIG. 1 and FIG. 2) shows elements that suggest a "carrier having 
its own public-secret key pair, in which the END is stored in the seller's document carrier 
in the form of END data. . . . sending the public encryption key of the buyer's document 
carrier to the seller's document carrier. . . 

Rosen does not explicitly show "the signature generated by the secret signing- 
key of a document carrier of the issuer of the END. . . ." 
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It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 6, 11. 9-12) "[digital] signatures are well known in the art and are used 
to detect if a signed electronic object has been altered in anyway since the time it was 
signed. ..." would have been selected in accordance with "the signature generated by the 
secret signing-key of a document carrier of the issuer of the END. . . because such 
signing would have provided an "electronic object integrity . . . check . . . " (See Rosen 
col. 6, 11. 11-12). 

Rosen does not explicitly show "the END is stored . . . together with a serial 
number counter indicative of the number of times that the END has been negotiated. . . ." 

Pitroda (col. 15, 11. 58-63; and col. 16, 11. 39-40) shows elements that suggest "the 
END is stored . . . together with a serial number counter indicative of the number of times 
that the END has been negotiated. . . 

Pitroda proposes serial number modifications that would have applied to the 
electronic ticket process and system of Rosen . It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to add the modifications 
taught by Pitroda to Rosen , because such modifications would have provided a means of 
"storing . . . various [types] of . . . numbers . . . [associated with] financial or personal 
transactional information. " (See Pitroda col. 2, 11. 55-61). 

Rosen (FIG. 7B; col. 2, 11. 61-62; col. 2, line 66; col. 3, 11. 59-60; col. 13, 11. 35-36; 
col. 14, 11. 12-35; col. 14, 11. 47-65; col. 15, 11. 3-12; col. 19, 11. 11-40; col. 21, 11. 36-65; 
col. 22, 11. 5-19; col. 24, 11. 21-60; col. 25, 11. 9-34; col. 27, 11. 15-20; col. 27, 11. 53-61; col. 
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28, 11. 30-36; col. 29, 11. 52-65; col. 38, 11. 48-67; col. 39, 11. 16-35; col. 39, 11.43-45; and 
col. 40, 11. 14-29) shows elements that suggest "establishing mutual recognition between 
the seller and buyer using a predetermined protocol between the respective document 
carriers . . . [and] aborting the negotiation if it is not negotiable. . . ." 

Rosen (col. 6, 11. 26-32; FIG. 2, els. 58, 84 and 100) shows elements that suggest 
"verifying in the seller's document carrier that the END, if it has been stored previously in 
that document carrier, has a different counter value this time and is therefore 
negotiable. . . 

Rosen (FIG. 1 and FIG. 2) shows elements that suggest "sending the public 
encryption key of the buyer's document carrier to the seller's document carrier, and using 
it to encrypt the message comprising the END together with the counter, sending that 
encrypted message to the buyer. . . ." 

Rosen does not explicitly show " using . . . [the public encryption key] to 
encrypt the message comprising the END together with the counter, sending the encrypted 
message to the buyer . . . and incrementing the counter by one." 

Abraham (col. 5, 11. 5-55; and FIG. 8) shows elements that suggest encrypting a 
"message comprising the END together with the counter, sending the encrypted message 
to the buyer . . . and incrementing the counter by one." 



Abraham proposes counter modifications that would have applied to the electronic 
ticket process and system of Rosen . It would have been obvious at the time the invention 
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was made to a person having ordinary skill in the art to add the modifications taught by 
Abraham to Rosen , because implementation of such modifications would have provided a 
method of "access control . . . individually programmable by the application 
owner. ..." of a digital work. (See Abraham col. 1, 11. 60-65; and col. 2, 11. 1-5). 

As per claim 49, Rosen shows the method according to claim 26. 

Rosen (FIG. 1 and FIG. 2) shows elements that suggest "issuing an END on a 
document-carrier. . . . [preceding] a method of negotiating an END. . . 

Rosen (col. 23, 11. 9-51; and FIG. 1) shows elements that suggest a "method of 
negotiating an END [i.e., "electronic money"] between seller and a buyer each possessing 
a tamper-resistant document carrier. . . 

Rosen (col 16, 11. 19-20; col. 4, 11. 4-37; col. 4 11. 40-67; col. 5, 11. 1-23; col. 5, 11. 
38-61; col. 6, 11. 3-13; FIG. 1 and FIG. 2) shows elements that suggest a "carrier having 
its own public-secret key pair, in which the END is stored in the seller's document carrier 
in the form of END data. . . . sending the public encryption key of the buyer's document 
carrier to the seller's document carrier. . . . 

Rosen does not explicitly show "the signature generated by the secret signing- 
key of a document carrier of the issuer of the END. . . ." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 6, 11. 9-12) "[digital] signatures are well known in the art and are used 
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to detect if a signed electronic object has been altered in anyway since the time it was 
signed. . . . " would have been selected in accordance with "the signature generated by the 
secret signing-key of a document carrier of the issuer of the END. . . ." because such 
signing would have provided an "electronic object integrity . . . check ..." (See Rosen 
col. 6, 11. 11-12). 

Rosen does not explicitly show "the END is stored . . . together with a serial 
number counter indicative of the number of times that the END has been negotiated. . . 

Pitroda (col. 15, 11. 58-63; and col. 16, 11. 39-40) shows elements that suggest "the 
END is stored . . . together with a serial number counter indicative of the number of times 
that the END has been negotiated. . . 

Pitroda proposes serial number modifications that would have applied to the 
electronic ticket process and system of Rosen . It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to add the modifications 
taught by Pitroda to Rosen , because such modifications would have provided a means of 
"storing . . . various [types] of. . . numbers . . . [associated with] financial or personal 
transactional information. " (See Pitroda col. 2, 11. 55-61). 

Rosen (FIG. 7B; col. 2, 11. 61-62; col. 2, line 66; col. 3, 11. 59-60; col. 13, 11. 35-36; 
col. 14, 11. 12-35; col. 14, 11. 47-65; col. 15, 11. 3-12; col. 19, 11. 11-40; col. 21, 11. 36-65; 
col. 22, 11. 5-19; col. 24, 11. 21-60; col. 25, 11. 9-34; col. 27, 11. 15-20; col. 27, 11. 53-61; col. 
28, 11. 30-36; col. 29, 11. 52-65; col. 38, 11. 48-67; col. 39, 11. 16-35; col. 39, 11.43-45; and 
col. 40, 11. 14-29) shows elements that suggest "establishing mutual recognition between 
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the seller and buyer using a predetermined protocol between the respective document 
carriers . . . [and] aborting the negotiation if it is not negotiable. . . 

Rosen (col. 6, 11. 26-32; FIG. 2, els. 58, 84 and 100) shows elements that suggest 
"verifying in the seller's document carrier that the END, if it has been stored previously in 
that document carrier, has a different counter value this time and is therefore 
negotiable. ..." 

Rosen (FIG. 1 and FIG. 2) shows elements that suggest "sending the public 
encryption key of the buyer's document carrier to the seller's document carrier, and using 
it to encrypt the message comprising the END together with the counter, sending that 
encrypted message to the buyer. . . 

Rosen does not explicitly show " using . . . [the public encryption key] to 
encrypt the message comprising the END together with the counter, sending the encrypted 
message to the buyer . . . and incrementing the counter by one." 

Abraham (col. 5, 11. 5-55; and FIG. 8) shows elements that suggest encrypting a 
"message comprising the END together with the counter, sending the encrypted message 
to the buyer . . . and incrementing the counter by one." 

Abraham proposes counter modifications that would have applied to the electronic 
ticket process and system of Rosen . It would have been obvious at the time the invention 
was made to a person having ordinary skill in the art to add the modifications taught by 
Abraham to Rosen , because implementation of such modifications would have provided a 
method of "access control . . . individually programmable by the application 
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owner. ..." of a digital work. (See Abraham col. 1, 11. 60-65; and col. 2, 11. 1-5). 



As per claim 5 1 , Rosen in view of Pitroda and Abraham shows the method 
according to claim 49. 

Rosen (FIG. 1 and FIG. 2) shows elements that suggest "the buyer's document 
carrier. . . ." 

Rosen (col. 16, 11. 19-20) shows elements that suggest a "secret key, verifies that 
the END is still valid " 

Rosen (col. 6, 11. 37-43) shows elements that suggest "after decrypting the 
message with its secret key . . . taking its time stamp. . . ." 

Rosen (col. 6, 11. 26-32; FIG. 2, els. 58, 84 and 100; and FIG. 7B; col. 2, 11. 61-62; 
col. 2, line 66; col. 3, 11. 59-60; col. 7, 11. 29-41; col. 13, 11. 35-36; col. 14, 11. 12-35; col. 
14, 11. 47-65; col. 15, 11. 3-12; col. 19, 11. 11-40; col. 21, 11. 36-65; col. 22, 11. 5-19; col. 24, 
11. 21-60; col. 25, 11. 9-34; col. 27, 11. 15-20; col. 27, 11. 53-61; col. 28, 11. 30-36; col. 29, 11. 
52-65; col. 38, 11. 48-67; col. 39, 11. 16-35; col. 39, 11.43-45; and col. 40, 11. 14-29) shows 
elements that suggest "if . . . [the time stamp] has expired, informs the issuer of this, and 
aborts the negotiation before incrementing the counter or setting the negotiation status 
flag." 

Rosen does not explicitly show "if . . . [the time stamp] has expired, informs the 
issuer of this. . . ."; however, it would have been obvious to one of ordinary skill in the art 
of secure transactions that Rosen's (col. 6, 11. 9-12) "[digital] signatures are well known 
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in the art and are used to detect if a signed electronic object has been altered in anyway 
since the time it was signed. . . . " would have been selected in accordance with "if . . . 
[the time stamp] has expired, informs the issuer of this, and aborts the negotiation before 
incrementing the counter or setting the negotiation status flag. . . ." because such time 
stamp validation would have provided an "electronic object integrity . . . check ..." (See 
Rosen col. 6, 11. 11-12). 

As per claim 53, Rosen in view of Pitroda and Abraham shows the method 
according to claim 37. 

Rosen (FIG. 2; FIGs. 30A-E; col. 15, 11. 15-65; col. 16, 11. 1-67; and col. 7, 11. 29- 
41) shows elements that suggest "recovering the negotiation of an END which has 
previously broken down, by providing the buyer's document-carrier with the necessary 
secret key which has been reproduced by the issuer or by a trusted third party." 

Rosen does not explicitly show "recovering the negotiation of an END. . . ."; 
however, it would have been obvious to one of ordinary skill in the art of secure 
transactions that Rosen (FIG. 2; FIGs. 30A-E; col. 15, 11. 15-65; and col. 16, 11. 1-67) 
"recertifying A 's certificate. . . . " would have been selected in accordance with 
"recovering the negotiation of an END. . . ." because such recertifying validation would 
have provided an "electronic object integrity . . . check. ..." (See Rosen col. 6, 11. 11- 
12). 
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As per claim 55, Rosen in view of Pitroda and Abraham shows the method 
according to claim 37. 

Rosen (col 41, 11. 37-39) shows elements that suggest "an END lost from a 
primary document-carrier. ..." 

Rosen (col. 13, 11. 5-15; col. 13, 11. 35-60; and col. 20, 11. 31-42) shows elements 
that suggest "recovering an END lost from a primary document-carrier, by activating a 
back-up document-carrier which has previously been provided with back-up data 
reproduced from the primary document-carrier." 

Rosen does not explicitly show a "back-up document-carrier which has previously 
been provided with back-up data reproduced from the primary document-carrier." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen (col. 20, 11. 38-42) "[the] overall system security pertaining to the money 
modules may be integrated with that for the trusted agents . . . but is preferably separate 
to provide for enhanced system security and system flexibility. . . . " would have been 
selected in accordance with "a "back-up document-carrier which has previously been 
provided with back-up data reproduced from the primary document-carrier. . . ." because 
such back-up capability would have provided an "electronic object integrity . . . 
check . . . " (See Rosen col. 6, 11. 11-12). 

As per claim 57, Rosen in view of Pitroda and Abraham shows the method 
according to claim 53. 
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Rosen (col. 15, 11. 3-37) shows elements that suggest "inhibiting the recovery until 
the expiry of the predetermined period of validity of the END." 

Rosen does not explicitly show "expiry of the predetermined period of validity of 
the END." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen 's (col 15, 11. 3-1 1) "[iff the timer expires before the message has been 
received, then Session Manager A will query Session Manager B to determine if the 
transaction is still running in B. IfB does not reply, then Session Manager will abort 
the transaction. . . . A similar time-out function exists in the money modules. . . . " would 
have been selected in accordance with "expiry of the predetermined period of validity of 
the END. . . ." because such a validity transaction would have provided an "electronic 
object integrity . . . check. ..." (See Rosen col. 6, 11. 11-12). 

As per claim 59, Rosen in view of Pitroda and Abraham shows the method 
according to claim 55. 

Rosen (col. 15, 11 3-37) shows elements that suggest "inhibiting the recovery until 
the expiry of the predetermined period of validity of the END." 

Rosen does not explicitly show "expiry of the predetermined period of validity of 
the END." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 15, 11. 3-1 1) "[iff the timer expires before the message has been 
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received, then Session Manager A will query Session Manager B to determine if the 
transaction is still running in B. IfB does not reply, then Session Manager will abort 
the transaction. . . . A similar time-out function exists in the money modules. ..." would 
have been selected in accordance with "expiry of the predetermined period of validity of 
the END. . . because such a validity transaction would have provided an "electronic 
object integrity . . . check . . . " (See Rosen col. 6, 11. 11-12). 

7. Independent claim 60 and dependent claim 61 are rejected under 35 U.S.C. § 103(a) as 
being unpatentable over Rosen in view Halter 5,3 19,705 (06/07/94) (herein referred to as 
" Halter "). 

As per claim 60, Rosen (col. 23, 11. 9-51; FIG. 1; FIG. 2; and FIG. 3) shows 
elements that suggest a method of negotiating an END sold by a seller to a buyer. . . ." 

Rosen does not explicitly show "the buyer splits the End electronically into two or 
more parts and then negotiates those parts separately to one or more further buyers." 

Halter (col. 4, 11. 23-52; and FIG. 2) shows elements that suggest "the buyer splits 
the End electronically into two or more parts and then negotiates those parts separately to 
one or more further buyers." 

Halter proposes customer distribution modifications that would have applied to the 
electronic ticket process and system of Rosen . It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to add the modifications 
taught by Halter to Rosen , because implementation of such modifications would have 
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provided "access to encrypted multimedia files. ..." to multiple customers of a digital 
work. (See Halter col. 4, 11. 39-52). 



As per claim 61, Rosen in view Halter shows the method of claim 60. 
Rosen (col. 4, 11. 51-67; col. 5, 11. 1-23) shows elements that suggest different parts 
of an END. 

Rosen (col. 6, 11. 9-12) shows elements that suggest said "each part is subjected to 
... [a] digital signature of the said buyer's document-carrier which effects the splitting." 

Rosen does not explicitly show "each part is subjected to . . . [a] digital signature 
of the said buyer's document-carrier which effects the splitting." 

It would have been obvious to one of ordinary skill in the art of secure transactions 
that Rosen's (col. 18,11. 17-35) "[validate] issuer certificate and check issuer 
signature. . . . Verify . . . identifiers. . . . Validate each sender certificate and check each 
sender signature. Verify . . . receiver identifier. ..." would have been selected in 
accordance with "each part is subjected to . . . [a] digital signature of the said buyer's 
document-carrier which effects the splitting. . . ." because such digital signatures would 
have provided an "electronic object integrity . . . check. . . . " (See Rosen col. 6, 11. 11- 
12). 



8. 



RESPONSE TO ARGUMENTS 

Applicant's arguments (Pre- Amendment A, paper#5, filed 05/08/2001) have been fully 
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considered but they are not persuasive. 

In response to Applicant's argument (Pre-Amendment A, papei#5, p. 12, 11. 4-14; 
and p. 13, 11. 1-5) which asserts that "In the present claim 25, the document carrier is self 
identifyng and unique. . . .", it is noted that the features upon which applicant relies (e.g., 
"the document carrier is self identifyng and unique. . . .") are not recited in the rejected 
claim(s). Although the claims are interpreted in light of the specification, limitations from 
the specification are not read into the claims. See In re Van Geuns, 988 F.2d 1 181, 26 
USPQ2d 1057 (Fed. Cir. 1993). 



In response to Applicant's argument (Pre-Amendment A, paper#5, p. 13, 11. 6-9) 
which asserts that "With regard to independet [claim] 26 . . . [the claim] now shows that, 
as well as mutual recognition being established between respective document carries, 
mutual vesication, between the sell and the buyer, is also established using one or more 
predetermined protocols. . . .", there is not independent claim 26. 

In response to Applicant's argument (Pre-Amendment A, paper#5, p. 13, 11. 6-22; 
p. 14; and p. 15, 11. 1-6) which asserts that "With regard to independet [claim] 37 . . . [the 
claim] now shows that, as well as mutual recognition being established between respective 
document carries, mutual verication, between the sell and the buyer, is also established 
using one or more predetermined protocols. . . .", it is well settled in the law that a 
reference may be relied upon for all that it would have reasonably suggested to one having 
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ordinary skill in the art, including non-preferred embodiments. (See Merck & Co. Inc. V. 
Biocraft Laboratories Inc., 10 USPQ2d 1843 (CAFC 1989). And, furthermore, In re 
Shepard, 138 USPQ 148 (CCPA 1963) "In considering disclosure of reference patent, it is 
pertinent to point out not only specific teachings of patent but also the reasonable 
inferences which one skilled in the art would logically draw therefrom." 

It is also well settled that the test for obviousness is not whether the claimed 
invention must be expressly suggested in any one or all of the references. Rather, 
the test is what the teachings of the references would have suggested in the broadest 
interpretation to those of ordinary skill in the art. The examiner recognizes that 
obviousness can only be established by combining or modifying the teachings of the prior 
art to produce the claimed invention where there is some teaching, suggestion, or 
motivation to do so found either in the references themselves or in the knowledge 
generally available to one of ordinary skill in the art. See In re Fine, 837 F.2d 1071, 5 
USPQ2d 1596 (Fed. Cir. 1988)and/« re Jones, 958 F.2d 347, 21 USPQ2d 1941 (Fed. 
Cir. 1992). 

In this case, the obviousness rejections have relied upon the knowledge generally 
available to one of ordinary skill in the art. 

In response to Applicant's argument (Pre-Amendment A, paper#5, p. 15, 11. 7-20; 
and p. 16) which asserts that the prior art references of record relied upon in the 
obviousness rejection of claim 60 teaches away from the claimed invention, it is well 
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settled int he law that "Disclosed examples and preferred embodiments do not constitute a 
teaching away form a broader disclosure or non-preferred embodiments." (See In re Susi, 
169 USPQ 423 (CCPA 1971) and it is well settled in the law that a reference may be 
relied upon for all that it would have reasonably suggested to one having ordinary skill in 
the art, including non-preferred embodiments. (See Merck & Co. Inc. V. Biocraft 
Laboratories Inc., 10 USPQ2d 1843 (CAFC 1989); furthermore, In re Shepard, 138 
USPQ 148 (CCPA 1963) "In considering disclosure of reference patent, it is pertinent to 
point out not only specific teachings of patent but also the reasonable inferences which 
one skilled in the art would logically draw therefrom." . 

CONCLUSION 

9. Any response to this action should be mailed to: 

Commissioner for Patents 
P. O. Box 1450 
Alexandria, VA 22313-1450 

Any response to this action may be sent via facsimile to either: 
(703)305-7687 (for formal communications EXPEDITED PROCEDURE) or 
(703) 305-7687 (for formal communications marked AFTER-FINAL) or 
(703) 746-7240 (for informal communications marked PROPOSED or DRAFT). 
Hand delivered responses may be brought to: 
Seventh Floor Receptionist 
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Crystal Park V 
2451 Crystal Drive 
Arlington, Virginia. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to John L. Young who may be reached via telephone at (703) 
305-3801 . The examiner can normally be reached Monday through Friday between 8:30 
A.M. and 5:00 P.M. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Eric Stamber, may be reached at (703) 305-8469. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the Group receptionist whose telephone number is (703) 
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